Run NetFlow Analyzer on a separate server

Run NetFlow Analyzer on a separate server

Hi AdventNet,

In your manual you mention "Run NetFlow Analyzer on a separate, dedicated PC or server. The software is resource-intensive, and a busy processor can cause problems in collecting NetFlow data."

As we've discovered a dual xeon with 4GB of RAM is not coping, and even in the 1 daily report I do I can see huge dips in the chart for whenever anyone does anything in the GUI. Plus we had someone hacked in a big way and thought - great we're demoing Netflow Analyzer - that'll show us - wrong it showed no traffic (depsite a very busy site) for even hours before the attack, even 2 days of graphs showed only 6 connections (considering it gets thousands a day).

So what is required (apart from another server) to seperate things so we can analyze without losing data?

We'd probably like to have 2 collectors (should 1 fail) and reports etc handled by another server so all the info is there to be analyzed on the GUI without effecting collection of data at the time.

Thanks.









      • Topic Participants

      • xyzed

                New to ADSelfService Plus?